@hotmeshio/long-tail 0.1.4 → 0.1.6

package/build/services/iam/bots.js

@@ -16,7 +16,7 @@ exports.ensureSystemBot = ensureSystemBot;
  * They share the same RBAC, OAuth credentials, and delegation tokens
  * as human users — no separate infrastructure needed.
  */
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const user_1 = require("../user");
 const user_2 = require("../user");
 Object.defineProperty(exports, "addBotRole", { enumerable: true, get: function () { return user_2.addUserRole; } });
@@ -25,13 +25,7 @@ Object.defineProperty(exports, "getBotRoles", { enumerable: true, get: function
 const bot_api_key_1 = require("../auth/bot-api-key");
 Object.defineProperty(exports, "listBotKeys", { enumerable: true, get: function () { return bot_api_key_1.listBotApiKeys; } });
 Object.defineProperty(exports, "revokeBotKey", { enumerable: true, get: function () { return bot_api_key_1.revokeBotApiKey; } });
-const LIST_BOTS = `
-  SELECT * FROM lt_users
-  WHERE account_type = 'bot'
-  ORDER BY created_at DESC
-  LIMIT $1 OFFSET $2`;
-const COUNT_BOTS = `
-  SELECT COUNT(*)::int AS total FROM lt_users WHERE account_type = 'bot'`;
+const sql_1 = require("./sql");
 /**
  * Create a new bot account.
  */
@@ -49,7 +43,7 @@ async function createBot(input) {
     // Create the user row, then set account_type column
     const user = await (0, user_1.createUser)(userInput);
     const pool = await (0, db_1.getPool)();
-    await pool.query('UPDATE lt_users SET account_type = $1 WHERE id = $2', ['bot', user.id]);
+    await pool.query(sql_1.SET_ACCOUNT_TYPE_BOT, ['bot', user.id]);
     return toBotRecord(user, input.description, input.created_by);
 }
 /**
@@ -67,8 +61,8 @@ async function getBot(id) {
 async function listBots(limit = 50, offset = 0) {
     const pool = await (0, db_1.getPool)();
     const [{ rows }, countResult] = await Promise.all([
-        pool.query(LIST_BOTS, [limit, offset]),
-        pool.query(COUNT_BOTS),
+        pool.query(sql_1.LIST_BOTS, [limit, offset]),
+        pool.query(sql_1.COUNT_BOTS),
     ]);
     // Attach roles to each bot
     const bots = await Promise.all(rows.map(async (row) => {
@@ -135,7 +129,7 @@ const SYSTEM_BOT_NAME = 'lt-system';
  */
 async function ensureSystemBot() {
     const pool = await (0, db_1.getPool)();
-    const { rows } = await pool.query('SELECT id FROM lt_users WHERE external_id = $1', [SYSTEM_BOT_NAME]);
+    const { rows } = await pool.query(sql_1.GET_USER_BY_EXTERNAL_ID, [SYSTEM_BOT_NAME]);
     if (rows.length > 0)
         return rows[0].id;
     const bot = await createBot({

package/build/services/iam/context.d.ts

@@ -7,7 +7,7 @@ export declare function runWithToolContext<T>(ctx: ToolContext, fn: () => Promis
 /**
  * Retrieve the ToolContext for the current execution scope.
  *
- * Activities: reads from argumentMetadata (injected by activity interceptor).
+ * Activities: reads from headers (injected by activity interceptor).
  * Workflow scope: reads from AsyncLocalStorage (set by workflow interceptor).
  * Returns undefined when no identity is available.
  */

package/build/services/iam/context.js

@@ -7,9 +7,9 @@ exports.getToolContext = getToolContext;
  *
  * Two paths, checked in order:
  *
- * 1. **argumentMetadata** (production-safe, distributed):
+ * 1. **headers** (production-safe, distributed):
  *    The activity interceptor injects `principal` + `scopes` into
- *    `argumentMetadata`, which HotMesh delivers to the activity worker
+ *    `headers`, which HotMesh delivers to the activity worker
  *    via `Durable.activity.getContext()`. Works across process boundaries.
  *
  * 2. **AsyncLocalStorage** (workflow-local, single-process):
@@ -30,15 +30,15 @@ function runWithToolContext(ctx, fn) {
 /**
  * Retrieve the ToolContext for the current execution scope.
  *
- * Activities: reads from argumentMetadata (injected by activity interceptor).
+ * Activities: reads from headers (injected by activity interceptor).
  * Workflow scope: reads from AsyncLocalStorage (set by workflow interceptor).
  * Returns undefined when no identity is available.
  */
 function getToolContext() {
-    // 1. Try argumentMetadata (activity worker — works distributed)
+    // 1. Try headers (activity worker — works distributed)
     try {
         const actCtx = hotmesh_1.Durable.activity.getContext();
-        const meta = actCtx?.argumentMetadata;
+        const meta = actCtx?.headers;
         if (meta?.principal) {
             const principal = meta.principal;
             return {

package/build/services/iam/credentials.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.MissingCredentialError = void 0;
 exports.resolveCredential = resolveCredential;
 const oauth_1 = require("../oauth");
-const logger_1 = require("../logger");
+const logger_1 = require("../../lib/logger");
 /**
  * Thrown when credential resolution finds no credential for a provider.
  * Caught by route handlers to return structured 422 responses.

package/build/services/iam/ephemeral.js

@@ -9,9 +9,10 @@ exports.storeEphemeral = storeEphemeral;
 exports.exchangeEphemeral = exchangeEphemeral;
 exports.revokeEphemeral = revokeEphemeral;
 exports.cleanupExpired = cleanupExpired;
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
 const crypto_1 = require("../oauth/crypto");
-const logger_1 = require("../logger");
+const logger_1 = require("../../lib/logger");
+const sql_1 = require("./sql");
 // ── Token format ────────────────────────────────────────────────────────────
 // Opaque string: eph:v1:<label>:<uuid>
 // The LLM passes these through as-is. Exchange happens inside activity bodies.
@@ -80,9 +81,7 @@ async function storeEphemeral(value, opts = {}) {
     const expiresAt = opts.ttlSeconds
         ? `NOW() + ${opts.ttlSeconds} * INTERVAL '1 second'`
         : 'NULL';
-    const { rows } = await pool.query(`INSERT INTO lt_ephemeral_credentials (value, label, max_uses, expires_at)
-     VALUES ($1, $2, $3, ${expiresAt})
-     RETURNING token`, [Buffer.from(encrypted, 'base64'), opts.label || null, maxUses]);
+    const { rows } = await pool.query((0, sql_1.INSERT_EPHEMERAL)(expiresAt), [Buffer.from(encrypted, 'base64'), opts.label || null, maxUses]);
     return rows[0].token;
 }
 /**
@@ -97,18 +96,13 @@ async function exchangeEphemeral(token) {
     const pool = (0, db_1.getPool)();
     // Atomic increment + check in one query.
     // Returns the row if the exchange is valid, nothing if expired/exhausted.
-    const { rows } = await pool.query(`UPDATE lt_ephemeral_credentials
-     SET use_count = use_count + 1
-     WHERE token = $1
-       AND (expires_at IS NULL OR expires_at > NOW())
-       AND (max_uses = 0 OR use_count < max_uses)
-     RETURNING value, use_count, max_uses`, [token]);
+    const { rows } = await pool.query(sql_1.EXCHANGE_EPHEMERAL, [token]);
     if (rows.length === 0)
         return null;
     const { value: buf, use_count, max_uses } = rows[0];
     // Auto-delete when max_uses is reached (if bounded)
     if (max_uses > 0 && use_count >= max_uses) {
-        await pool.query(`DELETE FROM lt_ephemeral_credentials WHERE token = $1`, [token]);
+        await pool.query(sql_1.DELETE_EPHEMERAL, [token]);
     }
     return (0, crypto_1.decrypt)(buf.toString('base64'));
 }
@@ -117,7 +111,7 @@ async function exchangeEphemeral(token) {
  */
 async function revokeEphemeral(token) {
     const pool = (0, db_1.getPool)();
-    const { rowCount } = await pool.query(`DELETE FROM lt_ephemeral_credentials WHERE token = $1`, [token]);
+    const { rowCount } = await pool.query(sql_1.DELETE_EPHEMERAL, [token]);
     return (rowCount ?? 0) > 0;
 }
 /**
@@ -125,7 +119,6 @@ async function revokeEphemeral(token) {
  */
 async function cleanupExpired() {
     const pool = (0, db_1.getPool)();
-    const { rowCount } = await pool.query(`DELETE FROM lt_ephemeral_credentials
-     WHERE expires_at IS NOT NULL AND expires_at < NOW()`);
+    const { rowCount } = await pool.query(sql_1.CLEANUP_EXPIRED_EPHEMERAL);
     return rowCount ?? 0;
 }

package/build/services/iam/principal.js

@@ -11,21 +11,14 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolvePrincipal = resolvePrincipal;
-const db_1 = require("../db");
+const db_1 = require("../../lib/db");
+const sql_1 = require("./sql");
 /** UUID v4 pattern for distinguishing UUIDs from external_ids. */
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-/** Fetch user + roles by external_id OR id in one query. */
-const GET_USER_WITH_ROLES_FLEXIBLE = `
-  SELECT u.id, u.external_id, u.display_name, u.status, u.metadata,
-         r.role, r.type AS role_type
-  FROM lt_users u
-  LEFT JOIN lt_user_roles r ON r.user_id = u.id
-  WHERE u.external_id = $1 OR u.id::text = $1
-  ORDER BY r.created_at`;
 const ROLE_TYPE_PRIORITY = { superadmin: 3, admin: 2, member: 1 };
 async function resolvePrincipal(identifier) {
     const pool = (0, db_1.getPool)();
-    const { rows } = await pool.query(GET_USER_WITH_ROLES_FLEXIBLE, [identifier]);
+    const { rows } = await pool.query(sql_1.GET_USER_WITH_ROLES_FLEXIBLE, [identifier]);
     if (rows.length === 0)
         return null;
     const user = rows[0];

package/build/services/iam/resolve.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveToolContext = resolveToolContext;
 const delegation_1 = require("../auth/delegation");
 const user_1 = require("../user");
-const logger_1 = require("../logger");
+const logger_1 = require("../../lib/logger");
 /** Role type priority for determining highest role type. */
 const ROLE_TYPE_PRIORITY = { superadmin: 3, admin: 2, member: 1 };
 /**

package/build/services/iam/sql.d.ts

@@ -0,0 +1,10 @@
+/** Build INSERT for ephemeral credentials. expiresExpr is a SQL expression like 'NULL' or "NOW() + N * INTERVAL '1 second'". */
+export declare const INSERT_EPHEMERAL: (expiresExpr: string) => string;
+export declare const EXCHANGE_EPHEMERAL = "\n  UPDATE lt_ephemeral_credentials\n  SET use_count = use_count + 1\n  WHERE token = $1\n    AND (expires_at IS NULL OR expires_at > NOW())\n    AND (max_uses = 0 OR use_count < max_uses)\n  RETURNING value, use_count, max_uses";
+export declare const DELETE_EPHEMERAL = "\n  DELETE FROM lt_ephemeral_credentials WHERE token = $1";
+export declare const CLEANUP_EXPIRED_EPHEMERAL = "\n  DELETE FROM lt_ephemeral_credentials\n  WHERE expires_at IS NOT NULL AND expires_at < NOW()";
+export declare const LIST_BOTS = "\n  SELECT * FROM lt_users\n  WHERE account_type = 'bot'\n  ORDER BY created_at DESC\n  LIMIT $1 OFFSET $2";
+export declare const COUNT_BOTS = "\n  SELECT COUNT(*)::int AS total FROM lt_users WHERE account_type = 'bot'";
+export declare const SET_ACCOUNT_TYPE_BOT = "\n  UPDATE lt_users SET account_type = $1 WHERE id = $2";
+export declare const GET_USER_BY_EXTERNAL_ID = "\n  SELECT id FROM lt_users WHERE external_id = $1";
+export declare const GET_USER_WITH_ROLES_FLEXIBLE = "\n  SELECT u.id, u.external_id, u.display_name, u.status, u.metadata,\n         r.role, r.type AS role_type\n  FROM lt_users u\n  LEFT JOIN lt_user_roles r ON r.user_id = u.id\n  WHERE u.external_id = $1 OR u.id::text = $1\n  ORDER BY r.created_at";

package/build/services/iam/sql.js

@@ -0,0 +1,42 @@
+"use strict";
+// ─── Ephemeral credentials ──────────────────────────────────────────────────
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET_USER_WITH_ROLES_FLEXIBLE = exports.GET_USER_BY_EXTERNAL_ID = exports.SET_ACCOUNT_TYPE_BOT = exports.COUNT_BOTS = exports.LIST_BOTS = exports.CLEANUP_EXPIRED_EPHEMERAL = exports.DELETE_EPHEMERAL = exports.EXCHANGE_EPHEMERAL = exports.INSERT_EPHEMERAL = void 0;
+/** Build INSERT for ephemeral credentials. expiresExpr is a SQL expression like 'NULL' or "NOW() + N * INTERVAL '1 second'". */
+const INSERT_EPHEMERAL = (expiresExpr) => `
+  INSERT INTO lt_ephemeral_credentials (value, label, max_uses, expires_at)
+  VALUES ($1, $2, $3, ${expiresExpr})
+  RETURNING token`;
+exports.INSERT_EPHEMERAL = INSERT_EPHEMERAL;
+exports.EXCHANGE_EPHEMERAL = `
+  UPDATE lt_ephemeral_credentials
+  SET use_count = use_count + 1
+  WHERE token = $1
+    AND (expires_at IS NULL OR expires_at > NOW())
+    AND (max_uses = 0 OR use_count < max_uses)
+  RETURNING value, use_count, max_uses`;
+exports.DELETE_EPHEMERAL = `
+  DELETE FROM lt_ephemeral_credentials WHERE token = $1`;
+exports.CLEANUP_EXPIRED_EPHEMERAL = `
+  DELETE FROM lt_ephemeral_credentials
+  WHERE expires_at IS NOT NULL AND expires_at < NOW()`;
+// ─── Bot accounts ───────────────────────────────────────────────────────────
+exports.LIST_BOTS = `
+  SELECT * FROM lt_users
+  WHERE account_type = 'bot'
+  ORDER BY created_at DESC
+  LIMIT $1 OFFSET $2`;
+exports.COUNT_BOTS = `
+  SELECT COUNT(*)::int AS total FROM lt_users WHERE account_type = 'bot'`;
+exports.SET_ACCOUNT_TYPE_BOT = `
+  UPDATE lt_users SET account_type = $1 WHERE id = $2`;
+exports.GET_USER_BY_EXTERNAL_ID = `
+  SELECT id FROM lt_users WHERE external_id = $1`;
+// ─── Principal resolution ───────────────────────────────────────────────────
+exports.GET_USER_WITH_ROLES_FLEXIBLE = `
+  SELECT u.id, u.external_id, u.display_name, u.status, u.metadata,
+         r.role, r.type AS role_type
+  FROM lt_users u
+  LEFT JOIN lt_user_roles r ON r.user_id = u.id
+  WHERE u.external_id = $1 OR u.id::text = $1
+  ORDER BY r.created_at`;

package/build/services/insight/index.d.ts

@@ -7,6 +7,7 @@ export interface McpQueryInput {
     tags?: string[];
     wait?: boolean;
     direct?: boolean;
+    context?: Record<string, any>;
     userId?: string;
 }
 export interface McpQueryResult {
@@ -27,4 +28,15 @@ export interface DescribeResult {
     tags: string[];
 }
 export declare function startMcpQuery(input: McpQueryInput): Promise<McpQueryResult>;
+export interface WorkflowBuilderInput {
+    prompt: string;
+    tags?: string[];
+    wait?: boolean;
+    feedback?: string;
+    prior_yaml?: string;
+    answers?: string;
+    prior_questions?: string[];
+    userId?: string;
+}
+export declare function startWorkflowBuilder(input: WorkflowBuilderInput): Promise<McpQueryResult>;
 export declare function describeWorkflow(input: DescribeInput): Promise<DescribeResult>;

package/build/services/insight/index.js

@@ -5,26 +5,25 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.startMcpQuery = startMcpQuery;
+exports.startWorkflowBuilder = startWorkflowBuilder;
 exports.describeWorkflow = describeWorkflow;
-const pg_1 = require("pg");
 const hotmesh_1 = require("@hotmeshio/hotmesh");
-const config_1 = require("../../modules/config");
+const db_1 = require("../../lib/db");
 const defaults_1 = require("../../modules/defaults");
 const llm_1 = require("../llm");
 const prompts_1 = require("./prompts");
 // ── MCP query invocation ─────────────────────────────────────────────────────
 async function startMcpQuery(input) {
-    const { prompt, tags, wait = true, direct = false, userId } = input;
+    const { prompt, tags, wait = true, direct = false, context, userId } = input;
     const startTime = Date.now();
-    const connection = { class: pg_1.Client, options: config_1.postgres_options };
-    const client = new hotmesh_1.Durable.Client({ connection });
+    const client = new hotmesh_1.Durable.Client({ connection: (0, db_1.getConnection)() });
     const wfName = direct ? 'mcpQuery' : 'mcpQueryRouter';
     const entity = direct ? 'mcpQuery' : 'mcpQueryRouter';
     const prefix = direct ? 'mcp-query-direct' : 'mcp-query';
     const workflowId = `${prefix}-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
     const handle = await client.workflow.start({
         args: [{
-                data: { prompt, tags },
+                data: { prompt, tags, context },
                 metadata: { source: 'dashboard' },
                 lt: { userId },
             }],
@@ -46,6 +45,35 @@ async function startMcpQuery(input) {
         duration_ms: Date.now() - startTime,
     };
 }
+async function startWorkflowBuilder(input) {
+    const { prompt, tags, wait = true, feedback, prior_yaml, answers, prior_questions, userId } = input;
+    const startTime = Date.now();
+    const client = new hotmesh_1.Durable.Client({ connection: (0, db_1.getConnection)() });
+    const workflowId = `wf-builder-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+    const handle = await client.workflow.start({
+        args: [{
+                data: { prompt, tags, feedback, prior_yaml, answers, prior_questions },
+                metadata: { source: 'dashboard' },
+                lt: { userId },
+            }],
+        taskQueue: 'long-tail-system',
+        workflowName: 'mcpWorkflowBuilder',
+        workflowId,
+        expire: defaults_1.JOB_EXPIRE_SECS,
+        entity: 'mcpWorkflowBuilder',
+    });
+    if (wait === false) {
+        return { workflow_id: workflowId, status: 'started', prompt };
+    }
+    const result = await handle.result({ state: true });
+    const data = result?.data || result;
+    return {
+        ...data,
+        prompt,
+        workflow_id: workflowId,
+        duration_ms: Date.now() - startTime,
+    };
+}
 // ── Workflow description generation ──────────────────────────────────────────
 async function describeWorkflow(input) {
     const { prompt, result_title, result_summary } = input;

package/build/services/interceptor/activities/escalation.js

@@ -38,7 +38,7 @@ exports.ltClaimEscalation = ltClaimEscalation;
 exports.ltEnrichEscalationRouting = ltEnrichEscalationRouting;
 exports.ltCreateEscalation = ltCreateEscalation;
 const escalationService = __importStar(require("../../escalation"));
-const logger_1 = require("../../logger");
+const logger_1 = require("../../../lib/logger");
 /**
  * Resolve an escalation record. Called by the interceptor after
  * detecting a re-run (resolver data present in the envelope).

package/build/services/interceptor/activities/task.js

@@ -42,17 +42,20 @@ exports.ltAppendMilestones = ltAppendMilestones;
 exports.ltGetTaskByWorkflowId = ltGetTaskByWorkflowId;
 exports.ltGetTask = ltGetTask;
 const taskService = __importStar(require("../../task"));
-const publish_1 = require("../../events/publish");
-const db_1 = require("../../db");
+const publish_1 = require("../../../lib/events/publish");
+const db_1 = require("../../../lib/db");
+const sql_1 = require("../../user/sql");
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-/** Resolve an external_id to a UUID. Returns null if not found or already a UUID. */
+/** Resolve an identifier to a verified lt_users UUID. Returns undefined if not found. */
 async function resolveUserUuid(identifier) {
     if (!identifier)
         return undefined;
-    if (UUID_RE.test(identifier))
-        return identifier;
     const pool = (0, db_1.getPool)();
-    const { rows } = await pool.query('SELECT id FROM lt_users WHERE external_id = $1 LIMIT 1', [identifier]);
+    if (UUID_RE.test(identifier)) {
+        const { rows } = await pool.query(sql_1.VERIFY_USER_BY_ID, [identifier]);
+        return rows[0]?.id ?? undefined;
+    }
+    const { rows } = await pool.query(sql_1.GET_USER_BY_EXTERNAL_ID, [identifier]);
     return rows[0]?.id ?? undefined;
 }
 /**

package/build/services/interceptor/activities/workflow.js

@@ -2,11 +2,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ltSignalParent = ltSignalParent;
 exports.ltStartWorkflow = ltStartWorkflow;
-const pg_1 = require("pg");
 const hotmesh_1 = require("@hotmeshio/hotmesh");
-const config_1 = require("../../../modules/config");
+const db_1 = require("../../../lib/db");
 const defaults_1 = require("../../../modules/defaults");
-const logger_1 = require("../../logger");
+const logger_1 = require("../../../lib/logger");
 /**
  * Signal an orchestrator workflow from within the interceptor.
  * Used after a child workflow succeeds to send the result back
@@ -14,7 +13,7 @@ const logger_1 = require("../../logger");
  */
 async function ltSignalParent(input) {
     const client = new hotmesh_1.Durable.Client({
-        connection: { class: pg_1.Client, options: config_1.postgres_options },
+        connection: (0, db_1.getConnection)(),
     });
     const handle = await client.workflow.getHandle(input.parentTaskQueue, input.parentWorkflowType, input.parentWorkflowId);
     await handle.signal(input.signalId, input.data);
@@ -28,7 +27,7 @@ async function ltSignalParent(input) {
  */
 async function ltStartWorkflow(input) {
     const client = new hotmesh_1.Durable.Client({
-        connection: { class: pg_1.Client, options: config_1.postgres_options },
+        connection: (0, db_1.getConnection)(),
     });
     await client.workflow.start({
         workflowName: input.workflowName,

package/build/services/interceptor/activity-interceptor.d.ts

@@ -10,7 +10,7 @@
  *    the stored activity result → after-phase runs
  *
  * Before phase:
- *   Injects the envelope's pre-resolved principal into argumentMetadata
+ *   Injects the envelope's pre-resolved principal into headers
  *   so activities can read it via `Durable.activity.getContext()`.
  *   Skipped for `lt*` interceptor activities (they don't need identity).
  *

package/build/services/interceptor/activity-interceptor.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createLTActivityInterceptor = createLTActivityInterceptor;
 const hotmesh_1 = require("@hotmeshio/hotmesh");
-const publish_1 = require("../events/publish");
+const publish_1 = require("../../lib/events/publish");
 const state_1 = require("./state");
 /**
  * Create an LT Activity Interceptor.
@@ -16,7 +16,7 @@ const state_1 = require("./state");
  *    the stored activity result → after-phase runs
  *
  * Before phase:
- *   Injects the envelope's pre-resolved principal into argumentMetadata
+ *   Injects the envelope's pre-resolved principal into headers
  *   so activities can read it via `Durable.activity.getContext()`.
  *   Skipped for `lt*` interceptor activities (they don't need identity).
  *
@@ -32,7 +32,7 @@ function createLTActivityInterceptor(_options) {
         async execute(activityCtx, workflowCtx, next) {
             try {
                 // ── Before phase ─────────────────────────────────────────
-                // Inject principal into argumentMetadata for non-interceptor activities.
+                // Inject principal into headers for non-interceptor activities.
                 // The principal was resolved at the front door and travels in the envelope.
                 if (!activityCtx.activityName.startsWith('lt')) {
                     const envelope = (0, state_1.extractEnvelope)(workflowCtx);
@@ -40,8 +40,8 @@ function createLTActivityInterceptor(_options) {
                     if (principal) {
                         activityCtx.options = {
                             ...activityCtx.options,
-                            argumentMetadata: {
-                                ...(activityCtx.options?.argumentMetadata ?? {}),
+                            headers: {
+                                ...(activityCtx.options?.headers ?? {}),
                                 principal,
                                 scopes: envelope.lt?.scopes,
                                 ...(envelope.lt?.initiatingPrincipal

package/build/services/interceptor/completion.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.handleCompletion = handleCompletion;
 const state_1 = require("./state");
-const publish_1 = require("../events/publish");
+const publish_1 = require("../../lib/events/publish");
 /**
  * Handle a workflow that returned { type: 'return' }.
  *

package/build/services/interceptor/escalation.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.handleEscalation = handleEscalation;
 exports.handleErrorEscalation = handleErrorEscalation;
 const state_1 = require("./state");
-const publish_1 = require("../events/publish");
+const publish_1 = require("../../lib/events/publish");
 const credentials_1 = require("../iam/credentials");
 /**
  * Handle a workflow that returned { type: 'escalation' }.

package/build/services/interceptor/index.js

@@ -56,12 +56,12 @@ const DEFAULT_ACTIVITY_QUEUE = 'lt-interceptor';
  */
 async function registerLT(connection, options) {
     const taskQueue = options?.taskQueue ?? DEFAULT_ACTIVITY_QUEUE;
-    await hotmesh_1.Durable.registerActivityWorker({ connection, taskQueue }, interceptorActivities, taskQueue);
-    hotmesh_1.Durable.registerInterceptor(createLTInterceptor({
+    await hotmesh_1.Durable.registerActivityWorker({ connection, taskQueue, guid: `interceptor::${taskQueue}-${hotmesh_1.Durable.guid()}` }, interceptorActivities, taskQueue);
+    hotmesh_1.Durable.registerInboundInterceptor(createLTInterceptor({
         activityTaskQueue: taskQueue,
         defaultRole: options?.defaultRole,
     }));
-    hotmesh_1.Durable.registerActivityInterceptor((0, activity_interceptor_1.createLTActivityInterceptor)());
+    hotmesh_1.Durable.registerOutboundInterceptor((0, activity_interceptor_1.createLTActivityInterceptor)());
 }
 /**
  * The Long Tail interceptor wraps every registered workflow.
@@ -96,7 +96,7 @@ function createLTInterceptor(options) {
             const activities = hotmesh_1.Durable.workflow.proxyActivities({
                 activities: interceptorActivities,
                 taskQueue: activityTaskQueue,
-                retryPolicy: { maximumAttempts: 3 },
+                retry: { maximumAttempts: 3 },
             });
             // 2. Load config — unregistered workflows still get ToolContext
             const wfConfig = await activities.ltGetWorkflowConfig(wf.workflowName);

package/build/services/interceptor/lifecycle.js

@@ -13,7 +13,7 @@ exports.resolveReRun = resolveReRun;
 exports.ensureTaskWithRouting = ensureTaskWithRouting;
 exports.publishStartedEvents = publishStartedEvents;
 exports.completePlainResult = completePlainResult;
-const publish_1 = require("../events/publish");
+const publish_1 = require("../../lib/events/publish");
 // ── Helpers ──────────────────────────────────────────────────────────────────
 /** Extract workflow identity fields from the HotMesh context map. */
 function extractWorkflowIdentity(ctx) {

package/build/services/maintenance/index.js

@@ -35,9 +35,8 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.maintenanceRegistry = void 0;
 const hotmesh_1 = require("@hotmeshio/hotmesh");
-const pg_1 = require("pg");
-const config_1 = require("../../modules/config");
-const logger_1 = require("../logger");
+const db_1 = require("../../lib/db");
+const logger_1 = require("../../lib/logger");
 const dbaService = __importStar(require("../dba"));
 const CRON_TOPIC = 'lt.maintenance.prune';
 const CRON_ID = 'lt-maintenance-nightly';
@@ -115,7 +114,7 @@ class LTMaintenanceRegistry {
             return;
         const rules = this._config.rules;
         const schedule = this._config.schedule;
-        const connection = { class: pg_1.Client, options: config_1.postgres_options };
+        const connection = (0, db_1.getConnection)();
         await hotmesh_1.Virtual.cron({
             topic: CRON_TOPIC,
             connection,
@@ -147,7 +146,7 @@ class LTMaintenanceRegistry {
         if (!this.connected)
             return;
         try {
-            const connection = { class: pg_1.Client, options: config_1.postgres_options };
+            const connection = (0, db_1.getConnection)();
             await hotmesh_1.Virtual.interrupt({
                 topic: CRON_TOPIC,
                 connection,

package/build/services/mcp/adapter.js

@@ -34,12 +34,9 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BuiltInMcpAdapter = void 0;
-const logger_1 = require("../logger");
+const logger_1 = require("../../lib/logger");
 const mcpClient = __importStar(require("./client"));
 const mcpServer = __importStar(require("./server"));
-const mcpDbServer = __importStar(require("./db-server"));
-const mcpWorkflowCompilerServer = __importStar(require("./workflow-compiler-server"));
-const mcpWorkflowServer = __importStar(require("./workflow-server"));
 const mcpDbService = __importStar(require("./db"));
 /**
  * Built-in MCP adapter.
@@ -60,15 +57,6 @@ class BuiltInMcpAdapter {
             });
             logger_1.loggerRegistry.info('[lt-mcp] human queue server started');
         }
-        // Start DB query MCP server (always available)
-        await mcpDbServer.createDbServer();
-        logger_1.loggerRegistry.info('[lt-mcp] db query server started');
-        // Start Workflow Compiler MCP server (always available)
-        await mcpWorkflowCompilerServer.createWorkflowCompilerServer();
-        logger_1.loggerRegistry.info('[lt-mcp] workflow compiler server started');
-        // Start MCP Workflows server (exposes compiled YAML workflows as tools)
-        await mcpWorkflowServer.createWorkflowServer();
-        logger_1.loggerRegistry.info('[lt-mcp] workflow server started');
         // Connect to auto-connect servers from DB
         await mcpClient.connectAutoServers();
         // Also connect to explicitly specified servers
@@ -91,9 +79,6 @@ class BuiltInMcpAdapter {
     }
     async disconnect() {
         await mcpClient.disconnectAll();
-        await mcpWorkflowServer.stopWorkflowServer();
-        await mcpWorkflowCompilerServer.stopWorkflowCompilerServer();
-        await mcpDbServer.stopDbServer();
         await mcpServer.stopServer();
         logger_1.loggerRegistry.info('[lt-mcp] disconnected');
     }

package/build/services/mcp/client/connection.d.ts

@@ -20,7 +20,7 @@ export declare function disconnectFromServer(serverId: string): Promise<void>;
  * Returns the client or null if not found.
  *
  * Built-in servers are connected once under their canonical factory name.
- * Alias lookups (e.g. 'vision' matching 'long-tail-document-vision') reuse
+ * Alias lookups (e.g. 'translation' matching 'long-tail-translation') reuse
  * the same client instance to avoid double-connecting the singleton server.
  */
 export declare function resolveClient(serverId: string): Promise<Client | null>;
@@ -40,6 +40,15 @@ export declare function listServerTools(serverId: string): Promise<LTMcpToolMani
  * Check if a server is connected.
  */
 export declare function isConnected(serverId: string): boolean;
+/**
+ * Test connectivity to an MCP server without persisting.
+ * Creates a temporary client, connects, lists tools, then disconnects.
+ */
+export declare function testConnection(transportType: 'stdio' | 'sse' | 'streamable-http', transportConfig: Record<string, any>): Promise<{
+    success: boolean;
+    tools: LTMcpToolManifest[];
+    error?: string;
+}>;
 /**
  * Clear all state. Used in tests.
  */